Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-01-06 | tlssrv: remove usage reference to lost auth/secretpem | cinap_lenrek | |
2018-01-06 | factotum: remove unused sshrsa.c | cinap_lenrek | |
2018-01-06 | libsec: remove asn1toDSApriv() | cinap_lenrek | |
2018-01-06 | remove asn12dsa, dsa2pub, dsa2ssh and dsagen | cinap_lenrek | |
was mostly usefull for old ssh. | |||
2018-01-06 | auth/asn1dump: include in mkfile | cinap_lenrek | |
2018-01-06 | tlsclient: allow dumping the server's certificate with new -d flag | cinap_lenrek | |
usefull for debugging, like: ./8.tlsclient -d /fd/3 tcp!code.9front.org!https |[0=3] auth/asn1dump | |||
2018-01-06 | tlsclient: remove X509dump() call, writes to fd 1 | cinap_lenrek | |
2018-01-05 | /sys/lib/dist: split 9boot into 9bootproto, make *.386.iso and *.amd64.iso ↵ | cinap_lenrek | |
targets | |||
2018-01-05 | inst: determine kernel for bootsetup from $bootfile and $cputype | cinap_lenrek | |
2018-01-05 | sysinfo: #c/swap -> #¶/swap | cinap_lenrek | |
2018-01-05 | stats: show amount of reclaimable pages (add -r flag) | cinap_lenrek | |
reclaimable pages are user pages that are used for caches like the image cache, mount cache and swap cache. | |||
2018-01-04 | pc kernel: fix wrong simd exception mask (fixes go bootstrap) | cinap_lenrek | |
2018-01-02 | ape/libauth: remove auth_wep.$O from mkfile | cinap_lenrek | |
2018-01-02 | ape: update auth.h header for APE | cinap_lenrek | |
2018-01-02 | factotum(4): document dp9ik, update protocol list | cinap_lenrek | |
2018-01-02 | libauth: simplify _attrfmt() using fmtprint() avoiding stack buffer | cinap_lenrek | |
2018-01-02 | libauth: remove auth_wep() function, and non-existing httpauth() declaration | cinap_lenrek | |
2018-01-02 | factotum: remove legacy wep protocol | cinap_lenrek | |
2018-01-01 | libauth: fix out of bounds memory access in _parseattr() | cinap_lenrek | |
empty token would read ""[-1] accidentally in the AttrQuery case. | |||
2018-01-01 | factotum: replace custom hex parsing code with dec16() avoding timing side ↵ | cinap_lenrek | |
channels | |||
2017-12-31 | libmp: use constant time encode(2) routines instead of lookup tables | cinap_lenrek | |
the encode(2) routines are constant time now, so use them instead of using lookup table that can leak information through cache timing side channel. | |||
2017-12-31 | ape: make encXchr()/decXchr() functions available | cinap_lenrek | |
2017-12-31 | libc: constant time implementation for encode(2) routines, fix base32 | cinap_lenrek | |
the string encoding functions touch secret key material in a bunch of places (devtls, devcap), so make sure we do not leak information by cache timing side channels, making the encoding and decoding routines constant time. we also expose the alphabets through encXchr()/decXchr() functions so caller can find the end of a encoded string before calling decode function (for libmp). the base32 encoding was broken in several ways. inputs lengths of len%5 == [2,3,4] had output truncated and it was using non-standard alphabet. documenting the alphabet change in the manpage. | |||
2017-12-31 | wifi: get rid of custom hextob() routine, use dec16(), avoid copies in ↵ | cinap_lenrek | |
parsekey() | |||
2017-12-31 | aux/wpa: get rid of custom Hfmt() routine, just use encodefmt. use %E for ↵ | cinap_lenrek | |
mac addresses | |||
2017-12-30 | libsec: implement SPKI fingerprinting for okCertificate() | cinap_lenrek | |
Instead of only using a hash over the whole certificate for white/black-listing, now we can also use a hash over the Subject Public Key Info (SPKI) field of the certificate which contians the public key algorithm and the public key itself. This allows certificates to be renewed independendtly of the public key. X509dump() now prints the public key thumbprint in addition to the certificate thumbprint. tlsclient will print the certificate when run with -D flag. okCertificate() will print the public key thumbprint in its error string when no match has been found. | |||
2017-12-30 | libsec: fix mistake: strnchr -> strchr | cinap_lenrek | |
2017-12-30 | libsec: avoid unneccesary memory copies and redundant code in x509 | cinap_lenrek | |
getting rid of some functions that take Byte* and instead pass uchar* and length. keeping the signature and public key fields in CertX509 as Bits* allows ownership transfer by swapping pointers. use common code to copy CN from subject field. | |||
2017-12-29 | libsec: get rid of dummy data[1] in Bytes and Ints types (thanks pr) | cinap_lenrek | |
2017-12-29 | usbxhci: add missing pexit() in xhcirecover proc (thanks sam-d) | cinap_lenrek | |
2017-12-29 | wifi: revert rate adoption divider, breaks arpunks wifi | cinap_lenrek | |
2017-12-29 | /lib/bullshit: +converged | cinap_lenrek | |
2017-12-28 | devtls, devssl: avoid ~0UL comparsion (from drawterm) | cinap_lenrek | |
2017-12-28 | devmnt: use u32int for tagmask, simplify alloctag() | cinap_lenrek | |
2017-12-28 | wifi: don't implicitely update lastseen timestamp on nodelookup() | cinap_lenrek | |
in case we continue to send traffic (like ping) with the ap gone, the sending would keep updating bss->lastseen which prevents the timeout to happen to switch bss. | |||
2017-12-28 | etheriwl, etherwpi: limit transmit queue buffer bloat to 48k (at 22Mbit ≅ ↵ | cinap_lenrek | |
20ms) | |||
2017-12-28 | wifi: don't assume Wifi.rates[] is sorted, return net data rate for mbps ↵ | cinap_lenrek | |
(50% theoretical) | |||
2017-12-23 | arch(3): document #P/realmodemem file | cinap_lenrek | |
2017-12-23 | devvga: removing #v/vgabios, use /dev/realmodemem instead | cinap_lenrek | |
2017-12-23 | kernel: convert textmode cga screen contents to kmesg only once | cinap_lenrek | |
screeninit() might be called again by devvga when switching to textmode, so only convert the text framebuffer to kmesg the first time. | |||
2017-12-23 | auth(8): auth/debug tests both dp9ik and p9sk1 | cinap_lenrek | |
2017-12-23 | kernel: remove Ipifc.mbps, unused. | cinap_lenrek | |
2017-12-22 | /lib/bullshit: blockchain | cinap_lenrek | |
2017-12-21 | ip/tinc: handle and set ethertype for ipv6 | cinap_lenrek | |
2017-12-19 | upas/fs: more bugs | cinap_lenrek | |
2017-12-19 | upas/fs: fix precedence bugs, compare digest pointer to nil | cinap_lenrek | |
2017-12-19 | ether8169: add Macv45 for RTL8111HN, rename Macv45 -> Macv42 (thanks qeed, ↵ | cinap_lenrek | |
sam-d) | |||
2017-12-18 | nusb/ether: dont forward loopback packets on bridges, remove read ↵ | cinap_lenrek | |
nonblocking hack | |||
2017-12-18 | devether: dont forward loopback packets on bridges | cinap_lenrek | |
2017-12-18 | devbridge: disable write blocking on ethernets | cinap_lenrek | |